This listing of claims will replace all prior versions, and listings, of claims in the application: 



Listing of Claims: 

1. (CURRENTLY AMENDED) An apparatus for routing packets from a first network node 
to a second network node in a data network, comprising: 

means for assigning provisioning and then sending a unique first node identifier (ID) to 
the first node, wherein the unique first node ID uniquely identifies the first node , wherein 
provisioning the unique first node ID also comprises determining a virtual private network 
(VPN) that is associated with the first node, selecting the unique first node ID from a set of 
unique IP's that are associated with the VPN of the first node, and ; means for mapping the 
assigned a unique fest second node ID with the at least one VPN of the first node , wherein the 
unique first node ID is assigned, sent, and mapped provisioning, sending, and mapping are 
accomplished by an entity one or more entities other than the first node; 

means for receiving a packet from the first node, said packet including the unique fest 
second node ID, and including routing information for routing said packet to a destination 
address associated with said second node; and 

means for examining the packet to identify the unique first second node ID of the first 
node; and 

means for using said unique fest second node ID, routing information, and the mapping 
between the unique first node ID and the at least one VPN to determine whether said first node is 
associated with at least one VPN. 

2. (CURRENTLY AMENDED) The apparatus of claim 1 , wherein the first unique ID 
differs from the second unique ID further comprising means for routing the packet to the second 
node. 

3. (CURRENTLY AMENDED) An apparatus for associating nodes in a data network with 
at least one virtual private network (VPN), the data network including an access network having 
at least one Head End device and a plurality of nodes, the access network further including at 
least one shared access channel utilized by a first and a second node of the plurality of nodes to 
communicate with the Head End device, said apparatus comprising: 

means for assigning provisioning and then sending a unique first node identifier (ID) to 
the first node, wherein the unique first node ID uniquely identifies the first node , wherein 
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provisioning the unique first node ID also comprises determining a virtual private network that 
(VPN) is associated with the first node, selecting the unique first node ID from a set of unique 
IP's that are associated with the VPN of the first node, and ; means for mapping the assigned a 
unique &st second node ID with the at least one VPN of the first node , wherein the unique first 
node ID is assigned, sent, and mapped provisioning, sending, and mapping are accomplished by 
an entity one or more entities other than the first node; 

means for receiving an address for the first node that is associated with at least one VPN; 

means for receiving data from the first node in the access network; 

means for identifying, within the received data, the address and unique first second node 
ID of the first node; and 

means for using said identified address, the identified unique fest second node ID, and 
the mapping between the unique first node ID and the at least one VPN to determine whether 
said first node is associated with at least one VPN. 

4. (CURRENTLY AMENDED) The apparatus of claim 3 , wherein the first unique ID 
differs from the second unique ID further comprising means for mapping said first node to a 
particular sub interface on the access network . 

5. (CURRENTLY AMENDED) An apparatus for associating nodes in a data network with 
at least one virtual private network (VPN), the data network including an access network having 
at least one Head End device and a plurality of nodes, the access network further including at 
least one shared access channel utilized by a first and a second node of the plurality of nodes to 
communicate with the Head End device, said apparatus comprising: 

means for determining whether said first node is a member of a _at least one VPN; and 

means for if it is determined that said first node is a member of the at least one VPN, 
assigning and then sending a first unique identifier (ID) that is associated with the VPN to the 
first node and binding the a second unique ID of said first node with said VPN to thereby cause 
said first node to be associated with said VPN, wherein the unique ID is assigned, sent, and then 
bound assigning, sending, and binding are accomplished by an entity one or more entities other 
than the first node , wherein the unique ID uniquely identifies the first node . 

6. (CURRENTLY AMENDED) The apparatus of claim 5 , wherein the first unique ID 
differs from the second unique ID further including means for mapping a particular sub interface 
of the Head End to said particular VPN . 
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7. (CURRENTLY AMENDED) The apparatus of claim 5 further comprising: 

means for receiving at said Head End device a packet from said first node, said packet 
including a destination address corresponding to a second node in the network; 

means for examining said packet to identify the second unique ID of said first node; and 

means for using said second unique ID at said Head End device to determine whether 
said first node is a member of at least one VPN. 

8. (original) The apparatus of claim 7 further comprising: 

means for if it is determined that said first node is a member of a first VPN, determining 
at said Head End device whether the destination address of said packet is within said first VPN. 

9. (original) The apparatus of claim 7 further comprising means for routing the packet to the 
second node. 

10. (CURRENTLY AMENDED) An apparatus for configuring a Head End of an access 
network to route packets from a first node to a second node in the access network, the apparatus 
comprising: 

means for associating particular network nodes on the access network with a first virtual 
private network (VPN); 

means for assigning provisioning and then sending to the first node a unique identifier 
(ID) that is selected from a set of unique IP's that are associated with the first VPN, and wherein 
the unique ID is assigned provisioned and sent to the first node by an entity other than the first 
node, wherein the unique ID uniquely identifies the first node; and 

means for mapping the assigned unique ID with the first VPN to thereby cause the first 
node to be associated with the first VPN, wherein the assigned unique ID is associated by the 
entity one or more entities other than the first node. 

1 1 . (CURRENTLY AMENDED) The apparatus of claim 10 , wherein the first unique ID 
differs from the second unique ID further means for including mapping a particular sub interface 
of the Head End to the first VPN . 
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